Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
File: 58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json)
Hash identifier: onmKPxncmwtIE+ofPwUq2xltKuyIz+WJnud8v63iBgE=
Subject key identifier: E7:3E:A5:D7:77:EC:DB:4F:A1:BE:B0:B5:A4:E9:27:31:E0:2D:CF:78
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial: 019A541B44052655EBF8E4908717BEBF2BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
Manifest number: 0BC9
Signing time: Wed 05 Nov 2025 13:01:04 +0000
Manifest this update: Wed 05 Nov 2025 13:01:04 +0000
Manifest next update: Thu 06 Nov 2025 13:01:04 +0000
Files and hashes: 1: 3pxtcoitrFP84ablFN0e1N99UbU.roa (hash: 3rHwb/LGbKBgtS++gv9s6PE/pIkC8kqsGTnPOdr75VM=)
2: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: 6C27G9zLQ9clw0l5duJVXupMtcR0UlOPX52r2xZwQ5g=)
3: 83jnw3_iQXavgLNpPArd0mjD8v0.roa (hash: SHfszJ5S+RcUzQDWjfFykPyoXsOFj+P+O7U1p7lsd+k=)
4: 9TCbC5ZMWTliQOKPmZ8VOSeIZEs.roa (hash: ladwpTnVncQtchwvagqScI9AqnIAoqG+BVd9xXCXOlU=)
5: _sBQ-iEtTw6n3_2GUf1kdKinw6k.roa (hash: 2pQWnwaXMMFBZzZKZwaCBzryPcNsmH6tse3213iQbEg=)
6: hsyRrTmHUFy-dvGlMuWHGJoh8Ws.roa (hash: uXGOwuMsPP7paFlNgchG8Ort4AQoj239eYXxGZv6OVk=)
7: la2dPjbXAEn7TCutV5FDNd87YgY.roa (hash: Cy/GkdDa8H/gyDAs0CMDjYPIaE/yLrgi+H+nowssrsc=)
8: wrGzB70sU_9SIqxlx-1pOzK4ufs.roa (hash: hctgdi4NMknx7R7SWF0OvSDThJO+cXqWTsV2GWgcQfc=)
9: xDf42bpWqRCsDPxTubWSXNuBqFg.roa (hash: YkhsAjaT83vQpIvIVaLxfqKkzhztD+nQzU/2yzJtmvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:44:05:26:55:eb:f8:e4:90:87:17:be:bf:2b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
Validity
Not Before: Nov 5 13:01:04 2025 GMT
Not After : Nov 6 13:01:04 2025 GMT
Subject: CN=e73ea5d777ecdb4fa1beb0b5a4e92731e02dcf78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:86:76:46:b3:7a:15:ed:f4:5f:57:66:ea:5c:
16:aa:da:d9:9d:64:f0:50:65:19:ea:b5:cb:2a:d8:
c7:1d:0f:5d:1e:3c:37:2a:80:d9:89:99:33:c1:4e:
5f:80:03:04:5e:7b:a5:a8:b6:89:e5:b7:c0:db:45:
70:52:09:a9:4c:97:58:4c:18:8d:0e:fd:53:2e:86:
6c:02:c6:ad:c1:18:cb:cc:f7:0d:ed:cf:92:9e:db:
7b:99:5c:2c:ad:8e:97:41:42:7e:a6:0b:13:1d:6a:
f9:4e:a7:b4:f9:e8:9a:75:3d:36:4a:86:a5:fe:56:
38:04:ff:64:5a:4a:35:f0:ac:dd:6c:1f:c6:c1:cd:
a4:83:a2:77:ab:f8:7d:0b:ef:9c:23:ed:cb:44:8f:
95:9e:70:08:dc:27:78:12:a6:ef:43:8b:f4:44:72:
00:79:48:f9:36:56:da:b3:aa:c7:29:62:55:85:3e:
a2:4d:06:dd:df:e2:b9:57:a7:b5:ee:a7:b4:ad:51:
a1:9d:eb:30:03:82:20:ce:cc:0c:30:29:eb:28:e8:
60:d5:80:d8:97:7a:5a:51:9a:f6:bb:d1:ab:f2:53:
9d:1a:e5:2b:d7:ad:28:69:ac:73:b6:3f:fe:7d:8b:
74:f6:8e:1e:9c:f2:e0:81:8c:37:34:d1:d8:c9:5f:
56:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3E:A5:D7:77:EC:DB:4F:A1:BE:B0:B5:A4:E9:27:31:E0:2D:CF:78
X509v3 Authority Key Identifier:
keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:25:c6:27:5f:7e:30:a7:6c:c8:1e:00:41:5d:c3:59:a1:8d:
82:89:37:86:ca:7d:17:9c:12:e1:03:91:49:dd:50:6b:81:4d:
f6:e2:1b:a7:66:3f:d4:34:1c:9b:87:ed:b6:ca:79:e3:c8:e2:
32:6e:ca:bc:2f:61:9b:69:70:6a:b6:ee:a2:4d:e9:c5:c8:71:
7f:d9:ca:79:0e:27:4a:35:01:fb:f3:3f:48:10:19:64:90:78:
e0:6a:94:56:cc:d6:bc:f1:6c:fa:18:70:3c:89:aa:3e:b1:66:
c7:61:0b:cc:db:8f:6b:80:3c:04:0f:5e:67:19:5a:c9:dd:8f:
ae:e7:3e:12:18:40:f2:6d:42:71:8f:a8:20:01:52:e6:99:3f:
12:5b:0b:16:38:63:37:d2:97:97:ea:8a:5a:bc:66:45:c3:f9:
81:53:9f:29:6c:cf:ae:57:bc:21:4f:3e:3a:95:f2:3b:41:94:
47:f5:16:07:5b:80:ce:e7:50:02:93:19:b4:79:6a:81:9a:20:
64:9e:54:08:2b:dc:b0:6e:69:ea:79:ed:db:f5:07:bd:24:21:
41:1f:e9:88:dd:da:c6:93:d4:fd:ec:cf:92:c0:71:96:5f:6b:
62:d3:66:8e:9e:38:b3:43:0b:b2:45:90:7a:7a:b3:d8:49:49:
7a:5b:ca:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:46:22 2025 by rpki-client